CVE-2026-5435
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.
- Published Apr 28, 2026
- CVSS 7.3 high
- 0.4% chance of exploitation in the next 30 days (EPSS)